User Last Login Time
I'm trying to use DS6 built-in functionality for tracking user's last login time. I created a new password policy and enabled pwdKeepLastAuthTime attribute. Then I tried signing into Access Manager.
According to the documentation, an attribute pwdLastAuthTime should be added to the user entry, but it is not there.
Any ideas how I can get this to work?
Last login time is a feature provided with the new Directory Server password policy implementation introduced in DS 6 and is not part of the compatibility mode. Check the Directory Server password policy compatibility mode:
$ dsconf get-server-prop ... | grep 'pwd-compat'
pwd-compat-mode : DS5-compatible-mode
The Directory Server password policy compatibility mode must be advanced past DS5-compatible-mode:
$ ldapmodify ...
dn: cn=Password Policy,cn=config
changetype:modify
replace:pwdkeeplastauthtime
pwdkeeplastauthtime:TRUE
modifying entry cn=Password Policy,cn=config
ldap_modify: DSA is unwilling to perform
ldap_modify: additional info: (Password Policy: modify policy entry) "pwdKeepLastAuthTime: TRUE" is not supported in server mode DS5-compatible-mode ("cn=config" pwdCompat: 0).
$ dsconf pwd-compat ... to-DS6-migration-mode
$ dsconf get-server-prop ... | grep 'pwd-compat'
pwd-compat-mode : DS6-migration-mode
Now it should work. If not, please try binding directly to the directory server as the user (e.g., do an ldapsearch as that user) and check the entry.
Similar Messages
-
LDAP attribute for user's last login time?
Hi all,
Is there an LDAP attribute that I could return (via an "ldapsearch" query) that would contain the user's last login time?
We have:
Directory Server Version: 5.2_Patch_2 ; Build number: 2004.107.0034
other...
Identity Server 2004Q2
sparc-sun-solaris2.9
Thanks in advance!Hello,
If you need this info, you will have to create a password policy that log last logon time.
But be carefull with this function, it can create a lot of cpu load.
<http://docs.sun.com/app/docs/doc/820-4809/fhkrj?l=en&n=1&a=view>
Regards
Eric. -
Hi Friends,
I wanted to know the name of dictionary view which keep the user login details iee. login date and time. I want to check that what was the last login time of user. So that if user has not logged in since 30 days then his acccount must be locked.
Plz let me know if someone has any idea on this
Regards
AlokHi Guys
Thanks for your response. Let me more clear you what i m looking for.
I have 100s of developers working with me. I keep on maintaining data which user is being used by whom. I am using product/project based username. I want to achieve the following.
1) Find the users those are not using their login since X nos of days ie. to know who all are in use. Objective of this to know if any developer has swiched or quite from project.
2)I will lock those account and notify those owner that account has been locked considering that they are not using.
3)now these accounts can be allocated to some other developers on need basis.
This will give me flaxibility of using my existing resource and better management.
I hope i m clear with what all i need.
Please suggest best way to do this :)
Thanks a lot.
Alok -
Sunone Messaging Server 6.1--How to list all mail user's last login time
hi,i want to know how to list all the mail user's last login time.
There are more than 100000 mailbox accounts on our mail server,
i want to know which account is not used for more than 2 or 3 years.
thanks.http://wikis.sun.com/display/CommSuite/imsconnutil
Somchai. -
Oblix audit logs to track last login time in Sun DS
Hi,
I would like to use oblix audit logs to track last login time in Sun DS.
Is there a straightforward procedure to do that other than parsing the logs and using custom script to update Sun DS.
Please advice.
Thanks.Hi,
In OAM you can define your own plugins to run during the authentication (you include them in the relevant authentication schemes) - you could write one that updates the user profile of the logged-in user. You would be pretty much on your own, though, all that OAM would give you is the DN of the logged in user. You would need to include libraries that connect to ldap (or maybe the plugin could send a web service call) and perform the necessary attribute updates. Authn plugins are documented in the Developer Guide: http://docs.oracle.com/cd/E15217_01/doc.1014/e12491/authnapi.htm#BABDABCG (actually that's for 10.1.4.3).
Regards,
Colin -
Re: check last login time
Dear all,
How to check the last login time in Sun Solaris 8. Any command or file that records it?
Thanks,
JoeHave a look at the man page for last?
-
Getting the last login time of a user
I would like to know, if there is a timestamp of a user when the user last logged in. If not existing, what would be the easiest and safest way to obtain that information.
The purpose of having this information is detecting unused Oracle accounts.
Thanks,
DejanYou can use Oracle auditing and audit the CREATE SESSION privilege. Then you can look in the DBA_AUDIT_TRAIL at the TIMESTAMP column for the use of the CREATE SESSION privilege.
-
Hi
I'm currently doing clean up activities for the users who have not logged in the past 180 days. Running a suim report shows the last login of the 'Dialog User - A', However for the rest of the user types(communication, System, Service, Reference) which are currently used the last login dates back to an incorrect date (Ex: ALEREMOTE). Is there a way to find out when these type of users were last used.
SindhuWhich release and SP are you on?
Please compare the same via report RSUSR200.
If you are looking directly in the DB table USR02 and interpreting a single field then you can easily be mislead...
If you want to be sure, then a naming convention for these types of users is usefull... => Push them out to ZZ1 - 9 and use the generic naming feature of the SM19 log (it is optional and requires activation) to log the types of logins.
You can also do this using dynamic filters to gain a first impression of what is running on which server when you cannot "see it" during daylight
Cheers,
Julius -
Dear Expert,
I would like to control some of user id which cannot use in particular time (e.g.: peak hour). Could you advice if there are any configure setting which can setup login time limit in particular user id? (e.g.: CUA, if yes. could you advice?) Thanks very much!
Rdgs,
EmilyHi Emily
Again I would be looking at which programs are causing the high server load and limiting them to specific times of day. If not, maybe you need to look at general system performance and tuning of system to improve server workload?
As mentioned, I don't believe there is anything SAP standard for this but it seems like you are trying to use security to fix a system performance issue. I've been in cases where accounts are locked for specific activities (like payroll) but that's been done manually via SU10 and then unlocked after activity.
Regards
Colleen -
Hi Folks,
I need to generate User's Last logon time from AD database. Could any one please assist me on this.
Thanks in advance !
-ChalapathiHi,
Get-ADUser -Identity USERNAME -Properties LastLogonDate |
Select SamAccountName, LastLogonDate
Link to syntax:
http://ss64.com/ps/get-aduser.html
EDIT: Just in case:
http://blogs.technet.com/b/askds/archive/2009/04/15/the-lastlogontimestamp-attribute-what-it-was-designed-for-and-how-it-works.aspx
Don't retire TechNet! -
(Don't give up yet - 13,085+ strong and growing) -
How Do I check User Last Login information
Hi,
I am using JES Mail Server 6.0. I have some 11,00 user account that I would like to delete. How can I know if this accounts are still active?
I need to know if they user has login into his/her account. I have webmail,POP3, IMAP4 configurations turn on. I need to get the user last accessed date for their mailboxes.
Please provide guidance. Thank youI think the utility you want is
imsconnutil
there is minor configuration you need to activate this. Our doc site seems pretty down, at this moment. -
User last login informatoin in a Portal report
Hi,
We are looking any report which can show the Users Last logon dates. We can see it in GUI but how to get this in Iview report. Is there any standard report like Portal Activity report. Portal Acitivty report will show the First logon date but not Last logn date.
We want to see the users latest logon date.
thanks
NaveenI do not know if any such report is there but if you just want the last successful logon details you can use ume api lastsuccessfullogondate
also this thread may be useful for u:
/thread/9515 [original link is broken] -
<p>Trying to create a report which would include the last logintime of each user. I can see that value is being stored somewherebecause when you select users in EAS it gives you a column 'LastLogin Time'.</p><p> </p><p>Is there any way to have that displayed via maxl?</p><p> </p><p>Thanks,<br>Jacob</p>
The login information being stored in the Application or Essbase Log files. You can query the both logs to extract user information (i.e who logged in, what time, day and type of information etc.) by several ways.<BR><BR>1. 3rd party tool called "LumenSoft"<BR>2. Build Usage cube. You can find the basic information on Essbase.com <BR>3. Write shell script. <BR><BR>I will say option # 2 is a good & long term solution.<BR><BR>Let me know if you need any help to begin. <BR><BR>Thanks,<BR>-Ricky <BR>
-
Portal users - last logon time details
Hi ,
We have an requirement to get the list of users who logged in with the Last Logon Information .
From Standard Portal activity report ...we can get only the First logon date of the users .
Kindly let us know the other possibilities to get it .
Thanks ,
KeerthiHi Keerthi,
Apart from Coding there is one option available through Authentication logs,this is tested in NW7.3 iam not sure which version you are using if you are using 7.0 then please check if this is available in 7.0 or not.
1) Go to NWA
2) Go to troubleshooting and logs section
3) Open log viewer and choose Authentication logs from the logs option
4) Specify the time frame in filter and choose everywhere for the logs to be picked up in generated report ,this wil gather authentication data from all server nodes.
5) these logs will show each and every login performed bu Useres and it also shows how many times user have logged in to a particular application,choose IRJ as the application.
6) Export the content to excel file and apply filter ,choose aplication as IRJ and choose date and time and select a user it will show all login with the date and time.
7) You can feed this data to a predefined excel format and pull out necessary info ,only you need to develop an excel template for your reporting purpose and manually logs requires to be pulled in from NWA to feed the excel .
this is another way which does not involve any java coding and tested on NW7.3 versions of Portal.
hope this helps.
Thx,
Siddharth -
Icreasingly I am being asked to provide the last time a user logged in to the directory. We have 7 consumers and a master and are using 4.16 sp1. Is there any where to log when a user accesses the directory without having to dig through access log files?
BrianHei Hei...
Thanks Thanks.. I got the answer, the
audit_sys_operations has to be "true" and mine is
false.. Sorry for the trouble Ya.. Thank you.
Adith ji
Thanks for the doc.
Regards..You saw nothing in dba_audit_session is NOT because audit_sys_operations,
It's because your AUDIT_TRAIL set to OS instead of DB.
AUDIT_SYS_OPERATIONS is to turn on/off user SYS auditing.
Please read the document link posted.
Maybe you are looking for
-
Hierarchy Descriptions missing
Hi, I uploaded hierarchies into an info object which was successful. My problen is that when i check the hierarchy in BW in the infoobject it shows only node ids for the nodes and not the descriptions as shown in R/3. I've never loaded hierarchies be
-
I am having problems setting the default view settings for Acrobat Pro 8. I have read some other posts and the view always defaults to something other than the settings I have chosen. I have: Chosen to not remember view settings of previously opened
-
While I was looking in my settings, I came across the profiles tab in the general section. In there I had two profiles; mflhomedis and MBShelloapp-provision. I am little paranoid about privacy so can anyone tell me what this is?
-
Hi All, do you think is possible to define a lookup query to display the DECODE value and store the CODE vale in the DB(the same behaviour having Lookup code)?. I tried several configurations but no way, seems that OIM show and store the value presen
-
I've tried everything I know possible, and am desperate for some help. I have avast free antivirus, and have never had an issue until now. My major problem is most of my files have been hidden, lost administrator ability even though I am the only acc